Input validation vulnerability in Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 21.2.8.1

The Photos and Files Contest Gallery plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This means that if the plugin is not updated to version 21.2.8.1 or higher, an unauthenticated attacker can inject malicious scripts into webpages. When a user visits one of these pages, the malicious script will run, putting the user’s data at risk. To protect yourself, make sure to update the Photos and Files Contest Gallery plugin to the latest version.